This Page Is Inserted by IFW Operations 
and is not a part of the Official Record 



BEST AVAILABLE IMAGES 

Defective images within this document are accurate representations of the 
original documents submitted by the applicant. 

Defects in the images may include (but are not limited to): 



BLACK BORDERS 

TEXT CUT OFF AT TOP, BOTTOM OR SIDES 
FADED TEXT 
ILLEGIBLE TEXT 
SKEWED/SLANTED IMAGES 
COLORED PHOTOS 

BLACK OR VERY BLACK AND WHITE DARK PHOTOS 
GRAY SCALE DOCUMENTS 



IMAGES ARE BEST AVAILABLE COPY. 

As rescanning documents will not correct images, 
please do not report the images to the 
Image Problems Mailbox. 



19/08 '02 THU 17:08 FAX 61 3 9288 1587 



FREEHILLS CARTER SMITH B 

VERIFIED TRANSLffllON OF per 



@002 



CERTIHCATE OF VERIFICATION 

I, the undersigned, Barbara PEILIN, 

o' 1 58, rue de rUnlversitd, 75S40 Paris Cedex 07. France, 



certify that, to the best of r«y knowledge and belief, the attached document is a true and 
complete translation of International Patent Application No. PCT/ fr96/0050O 



Da'edthis isc day of October 1997 



Signature of translator. 




19/Oft 02 TBU 17:08 FAI 61 3 9288 1567 



FREEHILLS CARTER SMITH B 



El 003 



35 



S^S'SeS!^ '•'™<^-««^™> TRANSACTIONS Om A 

Tht present invention concerns an dcaionlc payment method enabling 
5 transactions to be carried out relating to the puichase of "goods" offticd by 
supplieis by means of on-line services via a public computer telecommunicatioo 
networit to which arc attached suppliers' servers and clients' stations. Here, 'public 
computer telecommunication network" is intended to mean a networic to which 
persons or companies can fteely connect themselves so long as they have an 
10 address, for example the "Internet-. "Goods" is intended to mean products or 
services, which are delivered outside the network after the transaction has been 
concluded, as well as non-material goods, such as information, which can be 
delivered via the computer network. 

Various electronic payment methods have been proposed, and some ate 
15 already operational. 

Several methods are based on a new form of cunenc>'. They involve an 
electronic representation, sometimes called a "token", which can be purciy 
embodied in software or can be panly physical, for example a "sman card". Hwse 
methods necessitate circuUtion of the cuiiency on the computer network, which 
presents difficult security problems regarding the creation of false currency. 

Other known electronic payment methods necessitate a direct lelatioo with 
a bank or a banking network. TTiesc arc typified by methods used in the credit 
card networks such as well-known methods utilizing point-of-sale terminals 
linked to a bank card circuit as well as methods employing electronic cheques 
using an electronic signature to authenticate the purchaser. This is a form of 
cngagcmem letter issued by a purchaser, returned to the seller and accepted and 
recognised by a bank. 

There are certain inconveniences associated with methods which 
necessitate, at one time or another during a transaction, a relationship with a 
traditional banking system and the effecting of a transaction in such a system. 
Banking system transactions have a real cost which bee mes prohibitive when the 
am unt of the purchase is vciy low. for etamplc. an amount based on a query to a 
data base. And computer networks are well adapted to the sale of low-priced 
goods, in particular informational goods, since the deliver)- can be carried out 
through the network iisclf. Moreover, access to a banking network or a bank card 
network must have high levels of security, which, in practical terms, excludes the 
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possibility of access through a public computer network, such as the 'Internet", to 
which potential purchasers can connect themselves. 

Ad object of the invention is lo provide a method which avoids the 
problems of the known methods - in paiticular, a method pennitting a simple and 
5 reliable way of accomplishing transactions relating to the purchase of goods on a 
computer network, without the need to circulate electronic cuneocy, for goods of 
high price requiring authorisation &oro a traditional banking system, as welt as for 
goods of low to vciy-low price. 

The objca is achieved by a method of the type defined at the beginning of 
10 the present descrif^ion and comprising, according to the invention, the steps of: 

-creation, by the saver of a supplier connected to the network, of a 
transaction authorisation lequest or 'payment ticket", concemmg a purchase 
envisaged between the supplier and a customer, and comprising infoiroation 
relating to the supplier, the customer, the punrhased object and the price; 
15 -transmission of the payment ticket via the computer network to a payment 

server which is distinct from the customer station and the supplier server. 

-automatic verification by the payment sef\-er of whether the payment of 
the price is authorised for the customer involved, the verification being effected, 
according to the level of the price to be paid, cither by intenogation of an account 
20 of the customer, held by the payment server and intended for payment of smaller 
suras, or by intenogation on a banking network, independent of the computer 
network, for payment of higher sums; 

-if the verification is positivx. creation by ihc payment server of a 
transaction authorisation or voucher including at least pan of the payment ticket 
25 information; and 

-transmission of the vouclva^ to the supplier server via the computer 
network, to authorise the conclusion of the puichase. 

Thus, the procedure according to the invention is noteworthy in that it 
necessitates neither the aeation of electronic currency nor the ciiculation of 
30 electronic cunency over the computer network. 

The control of ihe transactions is effected by a payment server which alone 
can access a banking netw rk or a bank canJ network, and which manages non- 
bank customer accounts from which small sum tnmsactions can be effected. 

The payment server also manages non-bank supplier accounts used for 
35 small sum transactions. In this way. when a voucher is transmitted after 
verification by intenogation f a customer account held by the payment server, the 
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amount of the purchase is debited from the customer account and credited to the 
account of the conccnicd supplier and held by the payment ser\*cr, a pixKcduie 
which does not pix)ducc high processing costs. 

Each customer has available his own identity to enable use of the payment 
5 method. He must also have available a real bank account, preferably one which 
can be opetated by means of traditional bank cards. The verification by the 
payment server can include a preliminar>' phase of validating ihe identity of the 
customer from the contcnU of the payment ticket. The identity validation picccdcs 
access to the customer account (if the sum of the purchase is low) or access to the 
10 bank network (if the amount involved in the purchase is higher). The payment 
server preferably includes means, for example a data base, for storing the 
relationship between the customer identities used for transactions on the computer 
network and the bank identities (hank account or credit card numbers) used for 
transactions on the bank network. In ihat way, the ciiculaiion of banking identities 
15 on the computer network can be avoided. 

An implementation of the invention will now be described, as a non- 
limiting example, with reference to the accompanying drawings, in which: 

-Figure 1 is a general schematic view of an electronic payment system 
according to the invention; 
20 -Figure 2 is a representation in the form of a block schematic diagram of a 

payment serxxr of the system of Figure 1 : 

-Figure 3 illustrates the progression of operations relating to a purchase 
using the system of Figure I; and 

Figures 4A to 4C arc flow charts showing schematically the operations 
25 carried out by the payment server. 

Figure I represents schematically a computer telecommunication network 
10 to which are connected supplier scrvcre 20, customer stations 30 and at least 
one payment server 40. 

The computer nctu'ork 10 is an open or public network, for example the 
30 network known as the "Internet". The supplier scr\cre 20 are units such as those 
cuntntly used for on-line scr\iccs connccicd to the Iniemci. for example, units 
organised around UNLX-bascd multi-puKcssor machines. The customer stations 
30 are basically microcompuiers which are provided with means for connecting to 
the Internet network 10. for example, in the form of a "Web" interface. The 
35 supplier servers 20 and the cusionici stations 30 may use, for example, known 



19/019 '02 THU 17:10 FAX 61 3 9288 1567 



FREEHILLS CARTER SMITH B 



111006 



Software protocols commonly known as the -World Wide Wtb** (''WWW-) 
employing the HTTP proiivol. 

The payment server 40, shown in more detail in Figure 2, comprises front 
and rear units respectively 41 and 42 N)ih connected lo the Internet 10. The front 
5 unit 41 has an architecture similar to that of a standard sener connected to a 
network such as the Internet. The rear unit 42 includes a processing unit 43 
containing one or more processors, a data base 44 containing information relating 
to the suppliers omd customcn: subscribing to the payment system, a transaction 
register 45« an interface unit 46 for connecting with a banking network or with a 

10 bank card network 50. and a communication bus 47 or similar other link enabling 
connection bcrx^'een the different consiitucnt parts of the unit. A secure connection 
48 enables bi-directional communication between the front unit 41 and the 
processing unit 43. Communication with the network U) is controlled by the front 
unit 41 while management of the data base 44 as well as the control of the 

15 communication with the banking network arc assured by the rear unit 42. 

The data base 44 contains information relating to the customers and to the 
suppliers who have subscribed to the payment system. For each customer, the data 
base 44 contains the sN-stem identity ( "Cid ") assigned when the customer initially 
subscribes to the system, a customer account or electronic wallet ("PME") for 

20 payment of small sums, a banking identity such as an account number of a real 
account or a credit card number, possibly as well as the customer's owt\ access 
password or "key". For each supplier, the data base 44 contains the system identity 
of the supplicrmerchani ("Mid"), which is assigned when the supplier initially 
subscribes to the system, a supplier account, or electn>nic cash register (HTCE") for 

25 receipt of small sums and a banking identity such as a bank account number. 

Figure 3 shows schematically the different stages of a transaction relating 
to the purchase of goixls by a subscribing customer from a subscribing supplier. It 
can be a case of material ^ixxls. for which dclivcrv to the customer will take place 
after conclusion of the iraasaclion, i>r non-^niatcrial g^Kvls (such as infomiation) 

30 which caji be provided to the customer over the computer network as Six^n as 
electronic payment has been cffccicJ. 

il) Consultation bv the cuSKmicr 

After connecting to ihc Internet U'. a customer can consult the catalogue or 
"window" ot any supplier on-line by accesNinc the supplier's scr\*cr 20 ajid 
viewing (he supplier's wares on the viecn the cusiiMncr station M), On 
presentation of iMe cus(i>mei > N\Niem u!entii> Tld. ihc suppliers server 20 cm) 
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pitscnt to the customer particular financial conditions (for example a discount) 
applicable to the potential transaction. 
(2) Purchgsc dgmand 

Once the customer has chosen a commodity (object) O. his choice is 
5 transmitted to the supplier's scn cr in the form of a message containing an identity 
Old of the commodity and the identity Cid of the customer When necessary, for 
example, for the eventual dcHvcTv of the commodity chosen, the supplier's scr\w 
can request supplementary information such as an address and preferred delivery 
lime. This may conveniently be done through use of an eiecironic form sent over 
10 the network to be filled in by the customer. 

When the purchase envisaged represents a large sum or is subjected to legal 
conditions, a preliminary authentication of the customer may be desired. As will 
be seen in detail in the following, the authentication of a customer is effected by 
the payment server 40. Also, the authentication demand coming bom a supplier is 
15 advantageously issued in the form of a paymcm ticket of no value which is 
transmitted to the payment sener over the computer network via the customer 
station and, in the case of positive authentication, provokes the tetum of a voucher 
from the payment server to the supplier server, always by way of the customer 
station. The procedure for the establishment of a payment ticket and for the 
20 returning of a voucher are described in greater detail in the following. 

The purchase demand issued by the customer can relate lo a single 
commodity or to several goods to be provided as a group "baskc^ purchase 
(i^ Development nf ihr piymcnt ^icmm^l 

In response lo a purchase demand, the supplier scner develops a payment 
25 demand, which can include the following infomuuion: 
-Identity of the supplier ("MW): 

-Description of the commodity ordered, or. in the case of gi\>upcd 
purchases, each of the goixLs in the Kiskci; 
-^Typc of transaction (single or basket); 
31) -Identity of the customer (Xld"); 

-identity of the commiklity or collection of giHvJs ot the basket ("Old'*); 
"Price of the comm^vJity ("Old"); 
-Value Added Tax. \A\\ (if applicable). • 

-Date and time of ihc issue of the payment lickc; (hour and date stamping 
by the supplier serv er); 
-Poruvl of validity oi the paymenr uckci: aiiJ 
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-Seiial number in the soles regisier of the supplier (particularly in the case 
when the transaction has included a prelioiinaiy authentication stage). 
The combination of the above infonnation is coded as a series of b}'tes 
which arc contained in the hidden channel of a payment ticket (or URL of an order 
5 of a commodity. URL behtg the initials of 'Unifi^im Resource Locator" used in 
WWW software with the HTTP protocol), as follows: 

URL http:<SP><description of the oider>, 
where SP is the Intenwt address of the payment server. The payment ticket is 
addressed to the customer station. It is completed by two logical "anchois" which 
10 enable the customer cither to cancel or to confimi. 
(4) Sending the pavmgnt oirirr 

The payment order is transmitted to the payment scnxr simply by 
validation by the customer of the URL of the payment order. As will be 
appieciatcdv the pa)'ment ticket only passes in transit through the customer station. 

12 m Issue ofthevnti^hCT 

Upon reception of a payment order, the payment scr\er 40 decodes the 
payment order, authenticates the customer and im-estigates whether the payment 
can be authorised before reluming cither a voucher or a payment refusal. The 
customer authentication and pa>>mem authorisation operations will be described in 

20 greater detail with reference to Rgure 4. 

When the verification process does not permit authorisation of payment, an 
explanatory refusal notification (referring, for example, to insufficiem funds in the 
account, to the passing of a limit authorised for the customer, etc.) is sem to the 
customer by the payment sef> er. When the verification does permit authorisation 

25 of pav-mem. the information contained in the payment ticket is completed with a 
serial number in the transaction register 45. a lime stamp, a validity time limit 
(typically some tens of seconds) and ihe seal of the payment scr\er constif^ting 
certification infonnation. Hie combination of this information, possibly if>cr 
being digitally signed through use of a private key portion of a public key/private 

30 key encr> piion system belonging to the payment serv er (which ensures the validity 
and the integrity of the paymem authorisation) is encoded in a .series of bytes 
which constinjte the hidden channel of a voucher or de!ivcr>- t'RL: 

URL http;<M><dcscription of the v. -ichcr*. 
where M is the Internet address of the .supplier. 

35 lb\ Delivers- rctjiir^t 
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TTic voucher is transmitted to the supplier senxr via the customer starion. 
This can be effected automatically by the software installed in the customer station 
using the ic-iouiing possibility of the URU well-known to those skilled in the ait 
to which the invention pcnains. The supplier server decodes and verifies the 
received voucher before authorising delivcr>- of the commodity. This verificaiicQ 
includes using the private key of the paymcm ser>cr. vcrif>ing that the validity 
time limit has not passed and comparing the contents of the vtnicher with the 
payment demand. 

m Deiivffv ftf th^ <:ftnTrn1ity 

When the \-ouchef has been validated by the supplier sen, cr. diis sci\er can 
effect dcliveo' ditectly to the customer station, in the case where the commodity 
being purchased is intoimaiion. or address to the customer station a document 
permitting the collection of the commodity and. notably, specifying the place of 
delivery and the name of the recipient. 

It will be noted that, in the case of a grouped or basket purchase, the 
supplier sef\er creates an objea v.ith allocation of a unique identity, a list of the 
URLs of each of the goods comaincd in the basket. It is this object which is 
indicated in the URL commodity order and which enables the details of the 
purchased goods to be lecoided in the transaction register of the payraem scrx er 

Ftguies 4A to 4C show the operations carried out by the payment ser\cr 40 
in response to the reoeptioD of a payment oider. 

in the from unit 41(Rj»fe 4A). (he payment oidcr is decoded (stage 61) 
and its validity is examined (test 62) notably from the point of v icw of the validity 
period. If the result of the examination is negative, a refusal notification is sem to 
the customer station (stage 63). If the result of the examination is positive, 
customer authemication follo*-s (stage 04). The details of this operation are 
described further with rrfcrcncc to Figuic 4C. If the authemication is negative (t»t 
65), a refusal notification is sent to the customer (stage 63), If the authentication 
produces a positive result, the payraem order (possible limited to the customer 
idemity Cid. the supplier identity Mid and the price) is transmitted via the 
communication stage 68 to the rear unit 42 of the payment scr% cr snown in Figure 
2 (stage 66). The comjcction 4S. as mentioned above. ,s a secure comicction 
prev enting access to the rear unit by persons connected to the network U). 

The front unit 41 then waits for the rear unit to determine whether or not to 
authorise the payment (stage 67). If the payment is not authorised, (test 68). a 
refusal notification is sent to the cuMon:.r station (stage (»3). If the pavmcnt is 
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authorised, a voucher is prepared (stage 6^) using the information recorded in stage 
The voucher is saved in a memor>' of the front unit 41 (stage 70) and is sent to 
the supplier server via the customer siaiioti (stage 71), 

In the rear unit -12 (Figure 4B) of the payment scrv cr. a tKwly received and 
5 authenticated pa>Tnent order is examined to determine whether this orvicr should 
be authorised from the customer account PME or thrv>ugh the banking nerwik. In 
this re$pcct. the price is compan:rd with a minimum threshold (test 721. This 
thi^hold is. for example, some tens of French franco. 

If the threshold is exceeded, a request for cff. niRg the payment operation is 

10 sent 10 the banking network (stage 73) using the bonking iJentity corTtspi>nding to 
the customer identity Cld as obtained from vOnsultation of the data base 44. The 
positive or negative respi^nse from the banking network (stage 74), when received, 
is transmitted to the front unit 4! (stage 75). 

If the threshold is not exceeded, the payment can be effected from the PME 

15 customer account. 

In this event, the customer account is examined to determine whether it has 
sufficient funds (test 76). If ii does not, a refusal of payment autborisaiion is sent 
from the rear to the front unit (stage 75). If it d^>cs, ihc price is debited fron: the 
PME customer account, the TCE supplier account corresponding to the identity 

20 Mid is credited with the same sum (stage 77), the irxmsaciion is inscribed in the 
transaction register (stage 7S), and the payment authorisation - in other words, 
a positive response - is transmitted to the fronr unit 41 wiih the indication of the 
serial number of the inscription in the transaction register ;siage 75). 

The authentication procedure in the payment ^^:^^.cr ^Figure 4C). at the 

25 stage 04 of Figure 4A. comprises sending to the customer station, preferably in 
secure (cncr>pteJ) form, a demand for an :icccss key. or pass%%'Ord (stage f>41). 
Upon reception, in secure form, of the access key (>tacc c>4), j comparis<.>n is 
effected between corresponding information contained in the data base 44 (lest 
b43). If the comparison is negative, and a ma.\imum number of unsuccessful 

30 attempts has not been reached (test M4), the privess returns to stage o4l. If this 
maximum number has been reached, the failure to authonse is noted, and an alert 
is pnxJuced (stage tv45) and a negative rcspi^nsc is sent to the customer station 
(Stage 646). The alcn ^an comprise cancciiation ihe PME accoun' or 
surveillance of this accouni in order to dc[cci rcw usjcc a::cmpis. It the test at 

35 stop 043 is p\.>sii:vc. the auihcntication is rccorJeJ (>Mcc r>47^, j p^vsiiivc 
rcspiMisc IS provuicd (siacc o4;nV 
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Different encoding techniques for permitting secure transmission of 
numeric infonnation in a computer network are well known, notably for the 
request and sending of access keys. 

The authentication procedure disclosed herein permits a preliminary 
5 auii:cntication of a customer to uc effected when necessary before !he 
establishment of a payment demand by the supplier's server. For this 
authentication, it is sufficient to create a payment ticket in which the price 
indicated is zero, as indicated above. 

The recording of the voucher in the front unit permits the customezs and the 
10 suppliers to cany out controls and, possibly, to obtain copies of these. The 
recording of transactions in the rear unit enables records of the transactions to be 
conserved for possible use when needed later, for example, in the case of a dispute 
arising between a customer and a supplier. 

The balance in the customer accounts PME managed by the payment 
IS server is limited in size and, according to the preferred embodiment of the 
invention, these accounts dc not receive interest payments (the payment system 
being separate from the banking world), Repicnishiiient by a customca of his PME 
account can be effected from his bank account, by placing an order with bis 
banking establishment. 
20 The supplier accounts TCE managed by the payment server are associated 

with real bank accounts of the suppliers, into which they arc, for example, emptied 
daily. 

Although there has been described above one way of puiting into effect the 
method according to the in* nrion in an Internet environment and with WWW 

25 software using the HTTP protocol, a person skilled in the art will readily 
appreciate that the method can be put into effect with a network other than Internet 
or further with supplier servers and customer station software which does not use 
the HrrP protocol of WWW. Furthermore, secure authentication methods using 
apparatus such as smart ca*^ readers or voiceprint recognition means can be 

30 foreseen in the place of access keys. These and other variations which will occur 
to those skilled in the art arc within the spirit and scope of the present invention. 
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1. A method for effecting electronic payments for transactions relating to the 
purchase of goods offered by suppheis to customcis via a public computer 
S network, to which arc coimectcd supplier senrcis and customer stations, 
characterised by the steps of: 

(a) development, by a supplier server connected to the network, of a 
transaction authorisation request, or payment ticket, concerning a purchase 
envisaged between the supplier and a customer, and comprising information 

10 relating to the supplier, the customer, the purchase object and the price, 

(b) transmission of the payment ticket via the computer network to a 
payment server which is distinct from the customer station and supplier server, 

(c) automatic verification by the payment server if the payment of the price 
is authorised for the customer, the verification being effected, according to the 

15 level of the price to be paid, cither by interrogation of a customer account of the 
customer, held by the payment server and intended for payment of small sums, or 
by interrogation of a banking netwodc, independent of the computer networic, for 
payment of higher sums, 

(d) if the verification is positive, development by the payment server of a 
20 transaction authorisation or voucher including at least a part of the payment ticket 

information, and 

(e) transmission of the voucher to the supplier server via the computer 
network, so as to authorise the conclusion of the purchase. 

25 2. A method as claimed in claim 1, characterised in that when a voucher is 
transmitted after verification by interrogation of a customer account held by the 
payment server, the amount of the purchase is debited from the customer account 
and credited to the supplier account of the concerned supplier and held by the 
payment server. 

30 

3^ A method as claimed in claim 1 or 2, characterised in that the verification 
by the payment server comprises a preliminary customer authentication phase. 

4. A method as claimed in claim 3, characterised in that the authenticari n is 
35 achieved Dy recognition of an access key transmitted by the computer netw rk 
from the customer station to the payment server. 
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S. A method as claimed in any one of claims 1 to 4, characterised in that it 
comprises the development by the payment server of a voucher comprising at least 
a part of the information of the payment ticket and certification information. 

5 

6* A method as claimed in any one of claims I to 5. characterised in that it 
comprises memorisation by the payment server of the authorised transactions^ by 
stocking at least a part of the contents of the voucher. 

10 7. A method as claimed in any one of claims 1 to 6, characterised in that the 
payment ticket is transmitted £rom the payment server to the supplier server by the 
intermediary of the customer station* 

8. A method as claimed in any one of claims 1 to 7 characterised in that the 
IS voucher is transmitted from the payment server to the supplier server by the 

intermediary of the customer station. 

9. Electronic payment system for effecting transactions relating to the 
purchase of goods offered by suppliers to customeis via a public computer 

20 network, the system comprising customer stations and supplier servxis, 

characterised in that the system further comprises at least one payment 
server distinct from the customer stations and the supplier serx ers and comprising: 
-a front unit having means for connecting to the public network, 
*a rear unit having means for connecting to a banking network independent 
25 of the public network, 

-means for communicating between the from and rear units, 
-means for memorising customer accounts and supplier accounts^ and 
-processing means for verifying, in response to the reception by the front 
unit of a transaction authorisation request or a paymrnt ticket^ concerning a 
30 purchase envisaged between the supplier and a customer, if the payment of the 
price is authorised for the customer by interrogating the customer account or the 
banking network, and, if the verification is positive, developing a transaction 
authorisation, or v uchcr in order to transmit ihc vcrificat; n to the open network 
via the front unit. 



35 
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10. Payment system as claimed in claim 9^ characterised in that the payment 
server comprises means for memorising authorised transactions. 



/ 
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5 

The method uses a public communication network (10), to which are 
connected supplier servers (20) and customer stations (30) and comprises: 

- development by a supplier server of a payment ticket, concerning a 
puichasc envisaged between the supplier and a customer, and comprising 

10 information relating to the supplier, the customer, the purchase object and the 
price, 

- transmission of the payment ticket via the computer network to a 
payment server (40), 

- automatic verification by the payment server if the payment of the price 
15 is authorised for the customer, either by intcnogatton of a customer account of the 

customer, held by the payment server and intended for payment of small sums, or 
by interrogation on a banking networic (50) independent of the computer network 
(10), for payment of higher sums, 

- if the verification is positive, development by the payment server of a 
20 voucher including at least a part of the payment ticket information, and 

- transmission of the voucher to the supplier server so as to authorise the 
conclusion of the purchase. 



25 



Figure I. 
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